Internet server access control and monitoring systems
AssigneeSoverain Software LLC
InventorsThomas Mark Levergood, Lawrence C. Stewart, Stephen Jeffrey Morris, Andrew C. Payne, George Winfield Treese
Life of this patent
Estimating the term…
Abstract
This invention relates to methods for controlling and monitoring access to network servers. In particular, the process described in the invention includes client-server sessions over the Internet. In this environment, when the user attempts to access an access-controlled file, the server subjects the request to a secondary server which determines whether the client has an authorization or valid account. Upon such verification, the user is provided with a session identification which allows the user to access to the requested file as well as any other files within the present protection domain.
Claims79
A method of processing service requests from a client to a server system through a network, said method comprising the steps of forwarding a service request from the client to the server system, wherein communications between the client and server system are according to hypertext transfer protocol;
- returning a session identifier from the server system to the client, the client storing the session identifier for use in subsequent distinct requests to the server system;
- and
- appending the stored session identifier to each of the subsequent distinct requests from the client to the server system.
An information system on a network, comprising:
- means for receiving service requests from a client and for determining whether a service request includes a session identifier, wherein communications to and from the client are according to hypertext transfer protocol;
- means for providing the session identifier in response to an initial service request from the client in a session of requests;
- means for storing, at the client, the session identifier for use in each communication to the server system;
- means for appending the stored session identifier to each of subsequent communications from the client to the server system;
- and
- means for servicing the subsequent service requests.
A method of processing, in a server system, service requests from a client to the server system through a network, said method comprising the steps of:
- receiving, from the client, a service request to which a session identifier stored at the client has been appended by the client, wherein communications between the client and server system are according to hypertext transfer protocol;
- validating the session identifier appended to the service request;
- and servicing the service request if the appended session identifier is valid.
Dependencies are inferred from the claim text.